$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3a645f5-8120-361e-b967-a1471e36f33c.roa File: a3a645f5-8120-361e-b967-a1471e36f33c.roa (raw, json) Hash identifier: QGOvk3zecMq7ci2i9fyrjz5NJj6m1rvIoQyMnZct4Zs= Subject key identifier: 37:11:E8:43:A3:7A:C8:BD:7C:B0:36:8B:49:D7:C8:73:93:6E:AF:14 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABC19C4B14BDAD336EBB60 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3a645f5-8120-361e-b967-a1471e36f33c.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 44477 IP address blocks: 136.0.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c1:9c:4b:14:bd:ad:33:6e:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=739bfc37-f529-4c92-bdf0-1f1f8499dcfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:7e:d0:72:93:07:42:45:c2:f0:bd:fb:7c: c8:94:aa:a0:9f:e4:fe:9f:a2:d0:6b:12:47:68:84: ea:c8:49:8a:0a:7d:fd:45:b5:83:1e:b8:c1:93:e4: 41:f1:e1:0e:ef:47:01:bf:d4:5c:53:af:4d:00:3d: 54:a6:f3:0b:c2:e8:d8:40:8e:65:11:ff:f0:fe:e5: 03:5c:6a:ab:5f:b6:f4:78:f1:89:42:f3:2a:e1:a5: 10:a6:21:35:2f:0d:f1:bd:7b:2f:9d:93:1e:f8:18: 58:db:14:8a:a8:86:21:b8:29:5b:e6:bc:e7:44:e8: 76:c2:c2:20:10:28:38:a2:06:0c:a9:28:59:d8:d0: 86:df:9e:43:74:17:05:1a:66:00:12:bf:1c:5b:a0: 41:37:88:4c:e3:b7:d4:9e:06:14:02:78:a2:53:b5: 21:a0:f3:69:c2:3d:74:f9:0d:49:22:42:a8:e6:ae: b7:75:23:bb:3b:b8:9e:39:ee:48:e8:f2:31:3e:9e: b5:45:ef:62:ad:63:4a:0e:c7:ac:dd:66:98:b4:8a: 54:07:24:87:00:cc:19:52:48:bc:dc:b8:dd:f8:ac: 38:83:1a:21:c9:5a:4f:98:c5:bb:ab:e3:5a:17:08: 42:c5:33:94:1a:fd:b1:42:d4:a1:6e:3f:54:44:b3: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:11:E8:43:A3:7A:C8:BD:7C:B0:36:8B:49:D7:C8:73:93:6E:AF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3a645f5-8120-361e-b967-a1471e36f33c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:90:13:7f:70:d1:ea:a6:01:67:b2:12:0f:2c:07:66:2a:cb: ce:19:aa:87:8f:65:b3:9b:d9:bb:b7:00:e4:d7:ae:c3:c7:d5: 92:14:da:28:13:8f:db:66:c1:a9:04:06:fb:a4:36:3d:0a:af: eb:53:c4:69:a7:08:03:e4:ee:54:cf:bb:99:47:25:34:f2:24: c7:22:ab:27:85:8e:f5:29:29:6d:a4:a0:70:56:d0:15:ec:f3: 97:6d:74:62:e1:41:94:3f:0a:d0:4c:b9:35:64:88:4c:68:7c: 83:2a:f5:5e:0f:5e:42:f8:58:6f:30:11:8d:e8:51:80:0c:05: db:a7:94:71:82:ea:db:aa:68:f9:d3:25:14:e2:52:5d:b3:5c: e0:05:2b:78:9a:6b:66:13:b2:ff:88:eb:74:7b:bb:8d:fa:c8: b9:4f:31:8b:3f:8a:ce:81:2c:46:92:af:bd:13:a5:80:7a:f0: 51:78:a8:49:0c:b0:5e:69:ed:db:3b:b7:19:8e:c0:25:ff:3c: 5d:d6:3b:bc:29:fb:69:5d:2c:76:91:f0:3e:b5:6f:1a:8f:69: ee:7a:03:0a:b7:ab:af:d2:56:c6:84:6c:fc:f4:ba:02:7a:98: dd:5c:70:35:12:41:d9:26:e9:fc:1d:6e:c4:02:bc:d2:ec:94: b4:fb:2f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8GcSxS9rTNuu2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NzM5YmZjMzctZjUyOS00YzkyLWJkZjAtMWYxZjg0OTlkY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7V+0HKTB0JFwvC9+3zIlKqgn+T+n6LQaxJH aITqyEmKCn39RbWDHrjBk+RB8eEO70cBv9RcU69NAD1UpvMLwujYQI5lEf/w/uUD XGqrX7b0ePGJQvMq4aUQpiE1Lw3xvXsvnZMe+BhY2xSKqIYhuClb5rznROh2wsIg ECg4ogYMqShZ2NCG355DdBcFGmYAEr8cW6BBN4hM47fUngYUAniiU7UhoPNpwj10 +Q1JIkKo5q63dSO7O7ieOe5I6PIxPp61Re9irWNKDses3WaYtIpUBySHAMwZUki8 3Ljd+Kw4gxohyVpPmMW7q+NaFwhCxTOUGv2xQtShbj9URLNjHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcR6EOjesi9fLA2i0nXyHOTbq8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTNhNjQ1ZjUtODEyMC0z NjFlLWI5NjctYTE0NzFlMzZmMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuQE39w0eqmAWeyEg8sB2Yqy84ZqoePZbOb2bu3AOTXrsPH1ZIU2igT j9tmwakEBvukNj0Kr+tTxGmnCAPk7lTPu5lHJTTyJMciqyeFjvUpKW2koHBW0BXs 85dtdGLhQZQ/CtBMuTVkiExofIMq9V4PXkL4WG8wEY3oUYAMBdunlHGC6tuqaPnT JRTiUl2zXOAFK3iaa2YTsv+I63R7u436yLlPMYs/is6BLEaSr70TpYB68FF4qEkM sF5p7ds7txmOwCX/PF3WO7wp+2ldLHaR8D61bxqPae56Awq3q6/SVsaEbPz0ugJ6 mN1ccDUSQdkm6fwdbsQCvNLslLT7L2g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:03 2025 by rpki-client